Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer
File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer (raw, json)
Hash identifier: ZqvX+z9boIQHe4mgE39oQvWEcnPmANb5sfyVBOaRGaA=
Subject key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 4AF11A62CCB1306897F635B4C7243DAA97A55DEB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft
caRepository: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Thu 06 Mar 2025 19:42:57 +0000
Certificate not after: Thu 05 Mar 2026 19:47:57 +0000
Subordinate resources: IP: 103.160.18.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f1:1a:62:cc:b1:30:68:97:f6:35:b4:c7:24:3d:aa:97:a5:5d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000
Validity
Not Before: Mar 6 19:42:57 2025 GMT
Not After : Mar 5 19:47:57 2026 GMT
Subject: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:a2:3d:51:98:36:f5:bf:65:59:15:2a:47:
b4:7b:f5:24:a3:5f:0d:71:d1:4d:a7:5f:c3:48:73:
f2:2d:05:8c:2d:ca:ca:b4:39:d5:bf:4c:37:e1:09:
b4:88:a0:b3:dc:4f:57:3a:86:fa:23:3c:dc:0f:bb:
7e:cc:d2:1e:56:24:0d:5e:4e:a6:52:eb:38:5e:dd:
42:98:c2:fa:d1:a9:18:98:c1:11:a2:fc:a1:53:9d:
38:8c:a3:13:18:17:b1:ca:23:05:d6:da:db:e5:35:
05:b2:67:95:df:a0:54:a3:e3:89:01:c1:21:31:b5:
a6:4f:1c:ca:08:cd:b3:78:ff:a5:a1:a8:78:16:f6:
fe:4c:59:0c:90:c6:a8:5f:b3:1a:00:34:b3:52:b7:
9d:2f:73:ad:9d:79:ce:80:9e:d7:fd:e7:7c:1d:f2:
b9:43:b4:8d:da:46:b2:a0:62:c4:12:2d:71:53:b7:
2d:89:a2:44:e5:34:44:da:db:10:0d:7b:73:1f:97:
0e:2e:b4:a4:f8:e6:86:75:32:e7:af:b8:be:1c:f3:
85:d0:7a:c8:7a:2a:0c:b1:7c:40:49:21:b8:c0:d4:
07:77:12:03:ca:a0:dd:af:46:b7:a7:3e:7e:b0:84:
b7:6a:f4:20:17:74:ce:0a:5d:db:6a:d3:db:24:49:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.18.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:91:27:a2:30:9a:5a:cc:ff:99:20:99:f0:b0:0d:68:2b:4f:
a8:f0:e9:6b:c9:df:d2:59:06:f4:8f:de:14:9b:43:a9:51:a3:
ab:78:4f:3c:e4:ff:65:8c:71:cc:e2:67:05:81:50:95:ca:31:
9b:88:78:b0:3a:b0:08:5f:8f:fa:2a:6c:c0:f4:ec:67:92:28:
e1:21:be:10:3c:65:10:36:b3:85:05:32:01:96:6e:ef:a2:6a:
fc:13:74:99:77:82:56:f6:fb:98:5b:43:c4:77:1a:db:f1:b8:
15:82:e4:9c:26:8d:f3:54:21:d9:7e:32:b3:0e:15:1e:50:4b:
f3:a9:a5:57:2e:6f:3c:82:19:10:7b:4c:b7:78:91:80:76:4c:
0e:4b:a6:a2:51:0f:22:3f:f8:8b:f8:8b:67:b4:b4:1f:32:f2:
4d:a6:1b:6a:fd:8c:5b:8f:b2:46:cb:1f:53:82:02:8b:e3:cf:
ac:fd:8c:f7:7e:6e:5d:34:96:f4:98:6b:09:64:67:87:7e:71:
3f:c4:54:2d:db:46:6d:59:e5:ba:f9:48:9e:e6:68:c1:04:ea:
db:6f:51:53:ae:17:85:79:00:c0:e6:34:c3:66:7c:50:d6:32:
95:76:3f:d1:d6:8c:57:2c:bc:a3:04:48:84:73:c2:1b:6f:79:
29:86:b1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:07 2025 by rpki-client